GlobalProtect authentication bypass is being exploited in attacks
Palo Alto Networks says it has observed limited exploitation of CVE-2026-0257 against unpatched PAN-OS devices. The flaw can let an unauthenticated attacker establish an unauthorized GlobalProtect VPN connection when authentication-override cookies and a specific certificate configuration are in use.
Why it matters to you
An attacker entering through your own VPN can resemble a legitimate remote user. Identify every portal and gateway that generates or accepts override cookies, upgrade all of them together, terminate old sessions and investigate unusual device names, source networks and post-login activity.
Ransomware disruption at IDC Frontier remains an active cloud-recovery test
Japanese provider IDC Frontier says a ransomware attack caused the continuing outage in IDCF Cloud East Japan Region 1. The company isolated the affected network and systems and was still investigating the impact and restoring services in its latest public update; reporting says approximately 495 organizations and local governments were affected.
Why it matters to you
Provider-managed snapshots are not enough if ransomware or containment removes the same control plane. Keep immutable backups in an independently administered account or provider, export the keys and metadata needed to restore them and regularly prove recovery in a clean region.
US developers can again share pre-release AI models with UK safety testers
The US administration has reportedly reversed an earlier restriction that discouraged American AI developers from giving Britain's AI Security Institute early access to new models. The institute evaluates advanced systems before release for dangerous capabilities and misuse risks.
Why it matters to you
Independent evaluation is becoming part of the release pipeline for frontier models. For SaaS products, preserve model-version records, run repeatable tests against your own tools and permissions and keep a rollback path when a provider changes model behavior or access terms.
Broadcom says capital—not chips—is becoming AI infrastructure's main constraint
Broadcom CEO Hock Tan says the company is overcoming wafer and memory shortages, but the amount of capital required will be the largest constraint on continued AI expansion. The warning shifts attention from component availability to whether announced capacity can actually be financed.
Why it matters to you
A provider roadmap is not usable capacity until funding, power, networking and commissioning are secured. Separate operational regions from financed pipelines, avoid unnecessary long prepayments and keep workloads portable if a supplier slows expansion or changes commercial terms.
IMF says AI infrastructure investment is sustaining global growth
The IMF says heavy AI investment is helping keep global growth near 3% and could lift growth in advanced Asian economies by 0.5 to 1 percentage point. It also expects AI to augment, downgrade or eliminate about 40% of jobs over time, underlining the scale of both the infrastructure boom and the transition risk.
Why it matters to you
Demand may remain strong, but it does not make every AI workload economical. Measure cost per completed task, route narrow decisions to smaller models, preserve non-AI fallbacks and design products around human accountability where automation changes roles or customer outcomes.